Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hsHI_VYZxuhXJbMZQmKKhjjBNms.roa
File: hsHI_VYZxuhXJbMZQmKKhjjBNms.roa (raw, json)
Hash identifier: JpHuokaiSTwHnypxq+HYYdbc0Ph0qKuyX/PvrlYXvnU=
Subject key identifier: 86:C1:C8:FD:56:19:C6:E8:57:25:B3:19:42:62:8A:86:38:C1:36:6B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01842D309D2B573750A55B28E2B454D2A9ED
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hsHI_VYZxuhXJbMZQmKKhjjBNms.roa
Signing time: Mon 31 Oct 2022 08:37:51 +0000
ROA not before: Mon 31 Oct 2022 08:37:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210974
IP address blocks: 212.192.3.0/24 maxlen: 24
212.192.2.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:30:9d:2b:57:37:50:a5:5b:28:e2:b4:54:d2:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 31 08:37:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86c1c8fd5619c6e85725b31942628a8638c1366b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:34:e8:36:ed:d0:3c:5d:4f:8f:1d:4d:4b:
49:b5:6b:e3:16:86:de:b1:88:e5:19:b1:d7:4e:1b:
3c:90:23:92:70:01:9c:85:67:57:3b:d5:1c:dc:fb:
42:38:21:9d:61:a9:07:7d:fb:4b:2c:74:7e:e6:4d:
0c:ac:09:d0:ef:11:bb:70:84:d0:c5:2f:b8:a1:54:
c1:90:d7:04:aa:c2:49:c1:af:ba:d8:bc:ef:a0:0f:
57:e7:98:7e:55:ac:9d:00:b2:69:3e:1f:fa:e6:bf:
31:33:5f:70:e0:4d:67:b7:54:01:2a:a3:c2:26:d2:
ec:f6:22:a1:29:b9:f4:ae:79:ff:b7:11:5f:44:bc:
14:77:15:ee:62:b8:b1:82:0f:9b:a4:68:59:3f:5d:
4a:91:e4:5a:56:c4:08:c2:87:59:a8:9a:2d:38:ab:
f6:0c:03:82:ab:7f:a8:4c:74:2a:b2:70:50:ee:76:
79:0e:86:ae:cc:02:e2:94:07:80:b1:16:c9:71:98:
1d:3c:06:df:e8:c2:b8:6d:59:57:1f:06:dc:ac:a9:
31:01:36:8c:7c:4e:50:58:a1:cb:ce:5e:10:91:f9:
75:e4:bd:1b:8b:f0:36:15:8a:53:5d:b8:cf:f0:23:
40:f2:15:10:1f:2a:17:92:5c:4a:45:44:77:87:d8:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:C8:FD:56:19:C6:E8:57:25:B3:19:42:62:8A:86:38:C1:36:6B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hsHI_VYZxuhXJbMZQmKKhjjBNms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.60.0/24
212.192.2.0/23
Signature Algorithm: sha256WithRSAEncryption
41:ef:fb:c7:67:1b:f7:ba:d8:58:90:4b:7f:da:df:20:5a:66:
8a:93:39:66:8a:42:dd:00:13:c0:ee:9d:e3:7d:5f:12:72:1c:
94:66:7a:0d:55:07:29:3d:e6:4a:59:fc:b7:78:89:fa:1c:81:
8f:89:33:c3:74:ed:a2:31:a3:99:27:e0:e4:e9:f3:e4:b0:e4:
3f:40:00:f3:90:98:48:ad:ba:70:bc:ce:e5:0f:33:a7:1b:b1:
3d:81:39:38:f3:1e:7c:96:14:18:39:f8:ed:19:9c:64:14:b4:
3f:77:65:50:18:d9:d8:37:cc:fc:98:1b:25:a3:fd:89:f2:fa:
6f:34:9f:9d:3d:95:6d:6e:14:eb:4c:b2:9e:3a:d5:1d:51:96:
86:78:a9:03:ca:d2:2c:be:82:8d:46:59:6d:24:dc:b7:f3:91:
a0:a2:60:ef:2a:29:9b:65:0e:80:a7:c7:a1:f1:ab:4b:a2:4a:
d2:c6:7e:2b:cb:01:dc:ed:55:53:c3:65:cc:7c:5a:2c:84:d9:
54:a0:59:95:a2:a5:70:bd:f5:63:81:46:01:54:63:36:dd:84:
b1:24:a4:db:ac:65:d4:a0:86:9d:d7:14:07:86:99:f0:92:ba:
00:4a:1e:72:e4:b7:a8:fe:be:3d:87:0d:8d:17:88:2f:86:70:
81:13:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org